Abusing functionality to exploit a super SSRF in Jira Server (CVE-2022-26135)
submitted by /u/Mempodipper [link] [comments]
From NtObjectManager to PetitPotam
submitted by /u/onlinereadme [link] [comments]
Starting an AppSec program the simple way
submitted by /u/theappsecteam [link] [comments]
From Misconfigured Certificate Template to Windows Domain Admin
submitted by /u/Kondencuotaspienas [link] [comments]
mimikatz | by Benjamin DELPY
mimikatz by Benjamin DELPY mimikatz is a tool I’ve made to learn C and make somes experiments with Windows security. It’s now well known to extract plaintexts passwords, hash, PIN code and kerberos…
nday exploit: netgear orbi unauthenticated command injection (CVE-2020-27861)
submitted by /u/0xdea [link] [comments]
Bypassing Firefox’s HTML Sanitizer API
submitted by /u/digicat [link] [comments]
Code replay attack on the myGovID Scheme
submitted by /u/Gallus [link] [comments]
Bulk Analysis of Cobalt Strike’s Beacon Configurations
submitted by /u/DLLCoolJ [link] [comments]
Building a scalable static analysis program at Razorpay
submitted by /u/jubbaonjeans [link] [comments]